Heap Overflow Vulnerability in Pleasant Book PDF Reader

Yue Shu PDF Reader is a free domestic PDF reader developed by Ivy Tech. YueShu PDF Reader has a heap overflow vulnerability when parsing special PDF files, which can be exploited by attackers to cause a denial of service...

UBUNTU-CVE-2017-14617

In Poppler 0.59.0, a floating point exception occurs in the ImageStream class in Stream.cc, which may lead to a potential attack when handling malicious PDF files...

CVE-2017-2822

An exploitable code execution vulnerability exists in the image rendering functionality of Lexmark Perceptive Document Filters 11.3.0.2400. A specifically crafted PDF can cause a function call on a corrupted DCTStream to occur, resulting in user controlled data being written to the stack. A...

RedHat Update for poppler RHSA-2017:2550-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

poppler: Integer overflow in JBIG2Stream.cc

An integer overflow leading to heap-based buffer overflow was found in the poppler library. An attacker could create a malicious PDF file that would cause applications that use poppler such as Evince to crash, or potentially execute arbitrary code when opened...

The vulnerability of the Microsoft Windows PDF Library on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Windows PDF Library on the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code when objects in memory are processed incorrectly...

The vulnerability lies in the image processing mechanism when dealing with EMF files related to text output, PDF file editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat, and PDF file viewing programs like Adobe Reader Document Cloud. This allows a perpetrator to execute arbitrary code.

The vulnerability lies in the image processing mechanism when dealing with EMF files related to text output, PDF file editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat, and PDF file viewing programs like Adobe Reader Document Cloud. It arises due to the execution of an operation...

The vulnerability in the XFA event-management system allows attackers to execute arbitrary code. This vulnerability affects programs for editing PDF files such as Adobe Acrobat Document Cloud and Adobe Acrobat, as well as programs for viewing PDF files like Adobe Reader and Adobe Reader Document Cloud.

The vulnerability of XFA event management and PDF editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat, and PDF viewer programs like Adobe Reader, Adobe Reader Document Cloud is related to the use of memory after it is released. Exploiting this vulnerability can allow a malicious act...

ImageMagick Denial of Service Vulnerability (CNVD-2017-25063)

ImageMagick is the United States ImageMagick Studio company's set of open source image processing software. A denial-of-service vulnerability exists in the 'WritePDFImage' function of the ImageMagick coders/pdf.c file, which allows remote attackers to exploit the vulnerability to construct a...

Foxit PDF Compressor installers DLL loading remote code execution vulnerability

Foxit PDF Compressor is China's Foxit Foxit Software Corporation of a PDF document compression tool. Foxit PDF Compressor installers is one of the installation program. A security vulnerability exists in Foxit PDF Compressor installers versions 7.0.0.183 through 7.7.2.10. A remote attacker can...

Adobe Acrobat/Reader Information Disclosure Vulnerability

Adobe Reader is a PDF document reading software.Acrobat is a PDF document editing software. Adobe Acrobat Reader handles information leakage vulnerabilities in links within PDF documents, which can be exploited by attackers to cause information leakage...

CVE-2017-3115

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an information disclosure vulnerability when handling links in a PDF document...

CVE-2017-3117

Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable heap overflow vulnerability in the plugin that handles links within the PDF. Successful exploitation could lead to arbitrary code execution...

Adobe Acrobat/Reader Memory Corruption Vulnerability (CNVD-2017-25776)

Adobe Reader/Acrobat is a popular application for working with PDF files. A memory corruption vulnerability exists in Adobe Reader/Acrobat. Allowing an attacker to construct a malicious PDF file and trick the user into parsing it could crash the application or execute arbitrary code...

Adobe Acrobat/Reader Memory Corruption Vulnerability (CNVD-2017-25779)

Adobe Reader/Acrobat is a popular application for working with PDF files. A memory corruption vulnerability exists in Adobe Reader/Acrobat. Allowing an attacker to construct a malicious PDF file and trick the user into parsing it could crash the application or execute arbitrary code...

Microsoft Windows PDF Library Remote Code Execution Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft USA.PDF library is one of the PDF libraries. A remote code execution vulnerability exists in PDF Library in Microsoft Windows, which stems from the program failing to properly handle objects in memory. A remote attacker can...

Adobe Acrobat/Reader Memory Corruption Vulnerability (CNVD-2017-21197)

Adobe Reader/Acrobat is a popular application for working with PDF files. A memory corruption vulnerability exists in Adobe Reader/Acrobat. Allowing an attacker to construct a malicious PDF file and trick the user into parsing it could crash the application or execute arbitrary code...

ImageMagick Denial of Service Vulnerability (CNVD-2017-21013)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the 'WritePDFImage' function in the coders/pdf.c file in ImageMagick versi...

UBUNTU-CVE-2017-12662

ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePDFImage in coders/pdf.c...

DEBIAN-CVE-2017-2814

An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler 0.53.0. A specifically crafted pdf can cause an image resizing after allocation has already occurred, resulting in heap corruption which can lead to code execution. An attacker controlled PDF file ca...